DevStart Blogi Napisano Listopad 16, 2015 Zgłoś Udostępnij Napisano Listopad 16, 2015 Recent Windows 10 update brought three new fields in the Process Environment Block structure: x86 Field Type Field Name x64 offset size offset size 0x250 0x004 uintptr_t TppWorkerpListLock 0x388 0x008 0x254 0x008 struct _LIST_ENTRY TppWorkerpList 0x390 0x010 0x25C 0x200 void*[128] WaitOnAddressHashTable 0x3A0 0x400 It seems that all three of them are not so new to […]Wyświetl pełny artykuł Cytuj Link do komentarza Udostępnij na innych stronach More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.